SNMP Commands 1593User GuidelinesIf you want to use SNMPv3, you need to specify an engine ID for the device.You can specify your own ID or use a default string that is generated using theMAC address of the device. If the SNMPv3 engine ID is deleted, or theconfiguration file is erased, then SNMPv3 cannot be used. Since theEngineID should be unique within an administrative domain, the followingguidelines are recommended:1 For standalone devices use the default keyword to configure the EngineID.2 For stackable systems, configure your own EngineID, and verify that isunique within your administrative domain.Changing the value of snmpEngineID has important side-effects. A user'spassword (entered on the command line) is converted to an MD5 or SHAsecurity digest. This digest is based on both the password and the local engineID. The command line password is then destroyed, as required by RFC 2274.Because of this deletion, if the local value of engineID changes, the securitydigests of SNMPv3 users will be invalid, and the users will have to bereconfigured.ExampleThe following example configures the Engine ID automatically.console(config)# snmp-server engineID local defaultsnmp-server filterUse the snmp-server filter command in Global Configuration mode to createor update a Simple Network Management Protocol (SNMP) server filterentry. To remove the specified SNMP server filter entry, use the no form ofthis command.Syntaxsnmp-server filterfilter-name oid-tree {included | excluded}no snmp-server filterfilter-name [oid-tree]•filter-name — Specifies the label for the filter record that is being updatedor created. The name is used to reference the record. (Range: 1-30characters.)
